A critical vulnerability in Argo CD’s repo-server component enables authenticated attackers to execute arbitrary code and potentially compromise entire Kubernetes clusters. The flaw, stemming from improper input validation in manifest generation processes, affects multiple Argo CD versions and remai
The Department of Homeland Security (DHS) has confirmed a security breach of the Homeland Security Information Network (HSIN), a critical platform used by federal, state, local, tribal, and territorial partners to share sensitive law enforcement and threat intelligence information. The compromise ex
A malicious browser extension masquerading as “Google Notes” has been discovered intercepting cryptocurrency transactions by automatically replacing wallet addresses copied to the clipboard. The fake extension, distributed through unofficial channels and potentially compromised websites, monitors cl
Security researchers have discovered critical remote code execution (RCE) vulnerabilities in Cursor IDE, a popular AI-powered code editor. These flaws enable attackers to execute arbitrary code through zero-click prompt injection attacks, potentially compromising developer workstations without any u
The Ousaban banking trojan has resurfaced with a refined campaign targeting users in Spain and Portugal through malicious PDF attachments. This malware employs advanced evasion techniques, keylogging capabilities, and remote access functionalities to steal banking credentials and financial data. The
Progress Kemp LoadMaster appliances are facing active exploitation attempts targeting CVE-2024-8037, a critical pre-authentication remote code execution vulnerability with a CVSS score of 10.0. The flaw allows unauthenticated attackers to execute arbitrary commands on vulnerable systems without user
A sophisticated password spray campaign dubbed “LSHIY” has targeted Azure Command-Line Interface (CLI) authentication across 64 organizations, generating over 81 million malicious login attempts. Threat actors exploited Azure CLI’s programmatic access capabilities to bypass traditional authenticatio
Cybercriminals are leveraging malicious Google Ads to distribute MacSync stealer malware disguised as Anthropic’s Claude AI coding assistant. The campaign targets macOS users searching for “Claude Code” or similar terms, redirecting them to fake landing pages that deliver a weaponized application bu
Over 900 Oracle E-Business Suite (EBS) instances remain exposed to internet-facing attacks, with threat actors actively exploiting known vulnerabilities to gain unauthorized access. These publicly accessible systems represent critical enterprise infrastructure managing finance, HR, supply chain, and
Citrix has disclosed six critical vulnerabilities affecting NetScaler ADC and Gateway products that could enable denial-of-service (DoS) attacks and memory corruption exploits. The vulnerabilities, ranging from CVE-2025-22392 to CVE-2025-22397, impact multiple NetScaler versions and require immediat